Add a TXT record for verification

Before you use your domain with Office 365, we have to make sure that you own it. Your ability to log in to your account at your domain registrar and create the DNS record proves to Office 365 that you own the domain.

Note

This record is used only to verify that you own your domain; it doesn't affect anything else. You can delete it later, if you like.

To get started, go to your domains page at Google Domains by using this link. You'll be prompted to sign in. To do so:

Select Sign In.

Enter your login credentials, and then again select Sign In.

On the My domains page, find the domain you want to use with Office 365, and select the MANAGE link next to it. In the left navigation, select DNS.

In the ** Custom resource records ** section, in the boxes for the new record, type or copy and paste the values from the following table.

(You may have to scroll down.)

(Choose the Type value from the drop-down list.)

Name

Type

TTL

Data

@

TXT

1H

MS=ms XXXXXXXXNote: This is an example. Use your specific Destination or Points to Address value here, from the table in Office 365. How do I find this?

Select Add.

Wait a few minutes before you continue, so that the record you just created can update across the Internet.

Now that you've added the record at your domain registrar's site, you'll go back to Office 365 and request Office 365 to look for the record.

Add an MX record so email for your domain will come to Office 365

To get started, go to your domains page at Google Domains by using this link. You'll be prompted to sign in. To do so:

Select Sign In.

Enter your login credentials, and then again select Sign In.

On the Domains page, in the Domain section, select Configure DNS for the domain that you want to edit.

Important

If you have a G Suite email account, you must first delete the MX records associated with that account. The G Suite MX records prevent you from adding any other MX records, including those required for Office 365. Note that deleting the G Suite records does not delete your G Suite account. To delete your G Suite MX records, use the following steps.

In the Synthetic records section, in the G Suite area, select Delete.

(You may have to scroll down.)

Select Delete.

In the Custom resource records section, in the boxes for the new record, type or copy and paste the values from the following table.

(You may have to scroll down.)

(Choose the Type value from the drop-down list.)

Name

Type

TTL

Data

@

MX

1H

0 <domain-key> .mail.protection.outlook.com. This value MUST end with a period (.) The 0 is the MX priority value. Add it to the beginning of the MX value, separated from the remainder of the value by a space. Note: Get your <domain-key> from your Office 365 account. How do I find this? For more information about priority, see What is MX priority?

Select Add.

If there are any other Custom MX records, remove them.

Select Edit in the MX record row.

For each of the other Custom MX records, select the entry in the Data box and then press the Delete key on your keyboard to delete that record.

Continue until you have deleted the Data entry for each of the other MX records.

When you have deleted the Data entry for each of the other MX records, select Save to save your changes.

Add the five CNAME records that are required for Office 365

On the Domains page, in the Domain section, select Configure DNS for the domain that you want to edit.

Add the first CNAME record.

In the Custom resource records section, in the boxes for the new record, type or copy and paste the values from first row of the following table.

(You may have to scroll down.)

(Choose the Type value from the drop-down list.)

Name

Type

TTL

Data

autodiscover

CNAME

1H

autodiscover.outlook.com. This value MUST end with a period (.)

sip

CNAME

1H

sipdir.online.lync.com. This value MUST end with a period (.)

lyncdiscover

CNAME

1H

webdir.online.lync.com. This value MUST end with a period (.)

enterpriseregistration

CNAME

1H

enterpriseregistration.windows.net. This value MUST end with a period (.)

enterpriseenrollment

CNAME

1H

enterpriseenrollment-s.manage.microsoft.com. This value MUST end with a period (.)

Select Add.

Add the other four CNAME records.

In the Custom resource records section, create a record by using the values from the next row in the table, and then again select Add to complete that record.

Repeat this process until you have created all of the required CNAME records.

Add a TXT record for SPF to help prevent email spam

Important

You cannot have more than one TXT record for SPF for a domain. If your domain has more than one SPF record, you'll get email errors, as well as delivery and spam classification issues. If you already have an SPF record for your domain, don't create a new one for Office 365. Instead, add the required Office 365 values to the current record so that you have a single SPF record that includes both sets of values. Need examples? Check out these External Domain Name System records for Office 365. To validate your SPF record, you can use one of these SPF validation tools.

To get started, go to your domains page at Google Domains by using this link. You'll be prompted to sign in. To do so:

Select Sign In.

Enter your login credentials, and then again select Sign In.

On the Domains page, in the Domain section, select Configure DNS for the domain that you want to edit.

In the Custom resource records section, on the TXT record row, select Edit.

Important

Google Domains stores TXT records as a set that may contain multiple records. When you have at least one other TXT record, such as the TXT record you used to verify your domain, you must add TXT new records to that record set. Any attempt to enter additional TXT records as separate entries will result in a Duplicate record error message.

Select the (+) control.

In the boxes for the new record, type or copy and paste the values from the following table.

(You may have to scroll down.)

Data

v=spf1 include:spf.protection.outlook.com -all

Note

We recommend copying and pasting this entry, so that all of the spacing stays correct.

Select Save.

Add the two SRV records that are required for Office 365

To get started, go to your domains page at Google Domains by using this link. You'll be prompted to sign in. To do so:

Select Sign In.

Enter your login credentials, and then again select Sign In.

On the Domains page, in the Domain section, select Configure DNS for the domain that you want to edit.

Add the first SRV record.

In the Custom resource records section, in the boxes for the new record, type or copy and paste the values from the following table.

(You may have to scroll down.)

(Choose the Type value from the drop-down list.)

Name

Type

TTL

Data

_sip._tls

SRV

1H

100 1 443 sipdir.online.lync.com. This value MUST end with a period (.)Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.

_sipfederationtls._tcp

SRV

1H

100 1 5061 sipfed.online.lync.com. This value MUST end with a period (.)

We recommend copying and pasting this entry, so that all of the spacing stays correct.

Select Add.

Add the other SRV record.

In the Custom resource records section, create a record by using the values from the second row in the table, and then again select Add to complete that record.